Lucene search

MitreCVE-2020-23826

HistoryJan 26, 2021 - 6:15 p.m.

CVE-2020-23826

2021-01-2618:15:42

CWE-78

mitre

web.nvd.nist.gov

yale

wipc-303w

cve-2020-23826

vulnerability

remote command execution

rce

http api

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.013

Percentile

86.1%

JSON

The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution (RCE) through command injection via the HTTP API. NOTE: This may be a duplicate of CVE-2020-10176

Affected configurations

Nvd

Node

assaabloyyale_wipc-303w_firmwareRange2.21–2.31

AND

assaabloyyale_wipc-303wMatch-

VendorProductVersionCPE
assaabloyyale_wipc-303w_firmware*cpe:2.3:o:assaabloy:yale_wipc-303w_firmware:*:*:*:*:*:*:*:*
assaabloyyale_wipc-303w-cpe:2.3:h:assaabloy:yale_wipc-303w:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
assaabloy	yale_wipc-303w_firmware	*	cpe:2.3:o:assaabloy:yale_wipc-303w_firmware::::::::
assaabloy	yale_wipc-303w	-	cpe:2.3:h:assaabloy:yale_wipc-303w:-:::::::*

References

firedome.io/blog/firedome-discloses-0-day-vulnerabilities-in-yale-ip-cameras/

lp.firedome.io/hubfs/Yale%20WIPC-301W%20RCE%20Vulnerability%20Report%205-6.pdf

whiterosezex.blogspot.com/2021/01/cve-2020-23826-rce-vulnerability-in.html

Social References

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.013

Percentile

86.1%

JSON

Related for CVE-2020-23826